[cisco-voip] FW: [RTMT-ALERT-CM1-Cluster] AuthenticationFailed

[Tim Reimers]

Number of AuthenticationFailed events exceeds 1 within 1 minutes. The
alert is generated on Tue Sep 29 11:11:27 EDT 2009 on cluster
CM1-Cluster. 
 
 
Does anyone know where a Cisco document is on how to use traces to find
that?
 
I've looked in various trace lots in RTMT, but I cannot figure out the
right trace (callmanager, system, SDI, etc) to be looking for.
 
I can find plenty of references telling me that it's an authentication
failure
( eg
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/service/7_0_1/rtmt_ma
ster/rtalsys.html)
 
But that document provides -no- assistance in learning how to track down
more details about what's going on.
 
This really doesn't tell me what to DO about it.

AuthenticationFailed 

Authentication validates the user ID and password that are submitted
during log in. An alarm gets raised when an invalid user ID and/or the
password gets used. 

Default Configuration 

Table D-1 Default Configuration for the AuthenticationFailed RTMT Alert


Value 
Default Configuration 
Enable Alert 

Selected 

Severity 

Critical 

Enable/Disable this alert on the following servers 

Enabled on listed servers 

Threshold 

Number of AuthenticationFailed events exceeds: 

1 time in the last 1 minute 

Duration 

Trigger alert immediately 

Frequency 

Trigger alert on every poll 

Schedule 

24 hours daily 

Enable Email 

Selected 

Trigger Alert Action 

Default 

 
Tim Reimers
Systems Analyst II
Information Technology Services
City of Asheville
70 Court Plaza
Asheville, NC 28801
phone - 828-259-5512
treimers at ashevillenc.gov <mailto:timreimers at ashevillenc.gov> 
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20090929/d1cb66af/attachment.html>